 a9302e8439
			
		
	
	
	a9302e8439
	
	
	
		
			
			Signed-off-by: Zhenglong.cai <zhenglong.cai@cs2c.com.cn> Signed-off-by: Matt Turner <mattst88@gmail.com>
		
			
				
	
	
		
			60 lines
		
	
	
	
		
			1.1 KiB
			
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			60 lines
		
	
	
	
		
			1.1 KiB
			
		
	
	
	
		
			C
		
	
	
	
	
	
| #include <linux/init.h>
 | |
| #include <linux/types.h>
 | |
| #include <linux/audit.h>
 | |
| #include <asm/unistd.h>
 | |
| 
 | |
| static unsigned dir_class[] = {
 | |
| #include <asm-generic/audit_dir_write.h>
 | |
| ~0U
 | |
| };
 | |
| 
 | |
| static unsigned read_class[] = {
 | |
| #include <asm-generic/audit_read.h>
 | |
| ~0U
 | |
| };
 | |
| 
 | |
| static unsigned write_class[] = {
 | |
| #include <asm-generic/audit_write.h>
 | |
| ~0U
 | |
| };
 | |
| 
 | |
| static unsigned chattr_class[] = {
 | |
| #include <asm-generic/audit_change_attr.h>
 | |
| ~0U
 | |
| };
 | |
| 
 | |
| static unsigned signal_class[] = {
 | |
| #include <asm-generic/audit_signal.h>
 | |
| ~0U
 | |
| };
 | |
| 
 | |
| int audit_classify_arch(int arch)
 | |
| {
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| int audit_classify_syscall(int abi, unsigned syscall)
 | |
| {
 | |
| 	switch(syscall) {
 | |
| 	case __NR_open:
 | |
| 		return 2;
 | |
| 	case __NR_openat:
 | |
| 		return 3;
 | |
| 	case __NR_execve:
 | |
| 		return 5;
 | |
| 	default:
 | |
| 		return 0;
 | |
| 	}
 | |
| }
 | |
| 
 | |
| static int __init audit_classes_init(void)
 | |
| {
 | |
| 	audit_register_class(AUDIT_CLASS_WRITE, write_class);
 | |
| 	audit_register_class(AUDIT_CLASS_READ, read_class);
 | |
| 	audit_register_class(AUDIT_CLASS_DIR_WRITE, dir_class);
 | |
| 	audit_register_class(AUDIT_CLASS_CHATTR, chattr_class);
 | |
| 	audit_register_class(AUDIT_CLASS_SIGNAL, signal_class);
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| __initcall(audit_classes_init);
 |